Solved

Active Directoy 2003 Site and Services move server

Posted on 2011-09-30
3
378 Views
Last Modified: 2012-05-12
I have a branch office that I am setting up with one 2003 DC.  I have created a new site under "site and services" and created the new subnet also.  However, when I try to move the branch office DC from the original site to the new one I get a "access is denied" error.  I am logged in as domain admin.  Any ideas what's going on here?

thanks
0
Comment
Question by:cbsykes
  • 2
3 Comments
 
LVL 24

Expert Comment

by:Sandeshdubey
ID: 36895429
On Active Directory Sites and services go to security tab and add the admin user id with full control and check.

If  windows2008 DC exist in the network then on 2008 DC in ADSS on the Server object in ntds go to properties and remove  the check mark of Protect Objects from accidential deletion this might be preventing.Sample eg id given in below link.
http://blogs.technet.com/b/industry_insiders/archive/2007/10/31/windows-server-2008-protection-from-accidental-deletion.aspx

If above does not work then try with other admininstaror id to perform the same.If other admin account is not present create new userid and add the id to domain admin group and administartor group and check if this works.

0
 

Accepted Solution

by:
cbsykes earned 0 total points
ID: 36895562
Thanks for the reply.  I figured out the issue which was a deny permission that was set for the everyone group on all my DCs listed.  Once I removed the everyone group from each DC I was able to move my DC to the new site.  
0
 

Author Closing Comment

by:cbsykes
ID: 36915564
Figured out the issue on my own.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Synchronize a new Active Directory domain with an existing Office 365 tenant
This article runs through the process of deploying a single EXE application selectively to a group of user.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question